I can accomplish this in the apache config we control in the bedrock repo, but I thought that perhaps the better way would be to do this at the Zeus level. So please do this in Zeus for www.mozilla.org (prod-only) if that's best; otherwise WONTFIX this and I'll do it in apache via: https://wiki.apache.org/httpd/RewriteHTTPToHTTPS

Yeah, would prefer to do this in Zeus because then we can eliminate the Zeus and Apache config stuff for port 80 altogether, and just use a simpler redirect rule in Zeus rather than a normal vhost with a pool, compression, logging, etc.

(In reply to Paul McLanahan [:pmac] from comment #0) > I can accomplish this in the apache config we control in the bedrock repo, > but I thought that perhaps the better way would be to do this at the Zeus > level. So please do this in Zeus for www.mozilla.org (prod-only) Just curious why limit this to production-only? It makes a special case out of production.

Because dev and stage are already https only. Though you do bring up a good point in that I don't know if the same mechanism is doing the https redirecting on the other environments. :cturra (or whoever does this) can you also make sure that the other mozilla.org environments (www-dev.allizom, www.allizom, and the demos) are also setup in this way? Thanks :gozer.

:pmac, does this require some coordination? Or can I just make it so in Zeus whenever I want? Since this is www.mozilla.org, I imagine the possible impact could be large.

I would like to be around to check things out when you do it. So yeah, let me know the plan and we can maybe hang out in #www when it happens.

(In reply to Paul McLanahan [:pmac] from comment #5) > I would like to be around to check things out when you do it. So yeah, let > me know the plan and we can maybe hang out in #www when it happens. Allright, sounds like a plan, and to mirror how it's done in stage, it's just a little Zeus rule, easy to flip on/off.

HTTPS Redirect in place as of now both in PHX1 and SCL3

I'll keep the bedrock backends around for 2-3 days before removing that part of the backend infra.

Zeus cleaned up and removed port 80 virtualhosts.